A comprehensive modern architecture model is proposed to integrate platform solutions and tooling to support a professional Red Team.
☆327Oct 26, 2026Updated last week
Alternatives and similar repositories for Modern-Red-Team-Infrastructure
Users that are interested in Modern-Red-Team-Infrastructure are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Proof of Concept (PoC) implant for creating custom Cobalt Strike Beacons☆218Feb 11, 2026Updated 8 months ago
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated 3 weeks ago
- Advanced Active Directory network topology analyzer with SMB validation, multiple authentication methods (password/NTLM/Kerberos), and co…☆847May 16, 2026Updated 5 months ago
- Stealthy .NET assembly loading using AssemblyNative::LoadFromBuffer☆59Mar 22, 2026Updated 7 months ago
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆119Sep 17, 2026Updated last month
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom …☆1,161Oct 27, 2026Updated last week
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆185Apr 14, 2026Updated 6 months ago
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆284Apr 16, 2026Updated 6 months ago
- ↕️🤫 Stealth redirector for your red team operation security☆1,121Jul 20, 2026Updated 3 months ago
- Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 20…☆397Aug 16, 2026Updated 2 months ago
- BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and I…☆723Updated this week
- InfraGuard is a Command & Control Redirection Proxy and Manager which protects your Red Team Infrastructure against threat attribution☆334Oct 22, 2026Updated 2 weeks ago
- A Cobalt Strike Beacon Object File that exploits the BlueHammer vulnerability that to obtain a copy of the SAM database.☆167Apr 15, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Dynamic shellcode loader with sophisticated evasion capabilities☆345Oct 1, 2025Updated last year
- A EDR bypassing shellcode loader framework for Windows 10 64bit, featuring ETW/AMSI patching, Tartarus Gate, process protection and more☆97Oct 27, 2026Updated last week
- A modern alternative Web-UI for the Mythic Command and Control Server☆84Updated this week
- Extracts browser-stored data such as refresh tokens, cookies, saved credentials, credit cards, autofill entries, browsing history, and bo…☆836May 31, 2026Updated 5 months ago
- Static analysis & exploitation-triage toolkit for Windows kernel drivers. Discover IOCTLs, Symbolic Links, and check cert , and Downlaods…☆211Apr 27, 2026Updated 6 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆345Feb 2, 2026Updated 9 months ago
- A personal RAG system for offensive security knowledge☆178Aug 11, 2026Updated 2 months ago
- Evasion kit for Cobalt Strike☆510Updated this week
- Library that provides Python examples for interacting with the Cobalt Strike REST API☆25Nov 26, 2025Updated 11 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Windows Session Hijacking via COM☆353Dec 13, 2025Updated 10 months ago
- Demonstrating 3 persistence layers from a single EXE, that converts itself into proxy DLLs at runtime☆109Mar 29, 2026Updated 7 months ago
- AI-powered modular Active Directory red-team framework for authorized penetration testing, AD enumeration, attack-path analysis, Kerber…☆408Oct 17, 2026Updated 3 weeks ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 4 months ago
- GitHub-native command-and-control framework for authorized security research, with encrypted multi-channel transport and resilient failov…☆234Jul 18, 2026Updated 3 months ago
- AdaptixC2 is a highly modular advanced redteam toolkit☆3,846Updated this week
- Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSens…☆334Oct 26, 2026Updated last week
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 10 months ago
- AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64☆637Oct 24, 2026Updated 2 weeks ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Evasion kit for Cobalt Strike☆30Jan 16, 2026Updated 9 months ago
- A Beacon Object File suite for Microsoft SQL Server that speaks TDS 7.4 on the wire itself☆103Apr 9, 2026Updated 6 months ago
- A Bloodhound alternative. BloodBash will ingest the same files bloodhound does but no server is required to use this tool. It's great for…☆502Updated this week
- BingusLdr is a DLL loader built with Crystal Palace that uses a CET compatible stack spoofing technique.☆117Jul 14, 2026Updated 3 months ago
- Azure RedOps is a offensive security toolkit for assessing the security posture of Microsoft Entra ID☆187Oct 18, 2026Updated 2 weeks ago
- Extract data from modern Chrome versions, including refresh tokens, cookies, saved credentials, autofill data, browsing history, and book…☆557Jan 8, 2026Updated 9 months ago
- A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, wit…☆301Feb 21, 2026Updated 8 months ago